NETGEAR GS724TS-100NAS Bedienungsanleitung

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275

Zur Seite of

Richtige Gebrauchsanleitung

Die Vorschriften verpflichten den Verkäufer zur Übertragung der Gebrauchsanleitung NETGEAR GS724TS-100NAS an den Erwerber, zusammen mit der Ware. Eine fehlende Anleitung oder falsche Informationen, die dem Verbraucher übertragen werden, bilden eine Grundlage für eine Reklamation aufgrund Unstimmigkeit des Geräts mit dem Vertrag. Rechtsmäßig lässt man das Anfügen einer Gebrauchsanleitung in anderer Form als Papierform zu, was letztens sehr oft genutzt wird, indem man eine grafische oder elektronische Anleitung von NETGEAR GS724TS-100NAS, sowie Anleitungsvideos für Nutzer beifügt. Die Bedingung ist, dass ihre Form leserlich und verständlich ist.

Was ist eine Gebrauchsanleitung?

Das Wort kommt vom lateinischen „instructio”, d.h. ordnen. Demnach kann man in der Anleitung NETGEAR GS724TS-100NAS die Beschreibung der Etappen der Vorgehensweisen finden. Das Ziel der Anleitung ist die Belehrung, Vereinfachung des Starts, der Nutzung des Geräts oder auch der Ausführung bestimmter Tätigkeiten. Die Anleitung ist eine Sammlung von Informationen über ein Gegenstand/eine Dienstleistung, ein Hinweis.

Leider widmen nicht viele Nutzer ihre Zeit der Gebrauchsanleitung NETGEAR GS724TS-100NAS. Eine gute Gebrauchsanleitung erlaubt nicht nur eine Reihe zusätzlicher Funktionen des gekauften Geräts kennenzulernen, sondern hilft dabei viele Fehler zu vermeiden.

Was sollte also eine ideale Gebrauchsanleitung beinhalten?

Die Gebrauchsanleitung NETGEAR GS724TS-100NAS sollte vor allem folgendes enthalten:
- Informationen über technische Daten des Geräts NETGEAR GS724TS-100NAS
- Den Namen des Produzenten und das Produktionsjahr des Geräts NETGEAR GS724TS-100NAS
- Grundsätze der Bedienung, Regulierung und Wartung des Geräts NETGEAR GS724TS-100NAS
- Sicherheitszeichen und Zertifikate, die die Übereinstimmung mit entsprechenden Normen bestätigen

Warum lesen wir keine Gebrauchsanleitungen?

Der Grund dafür ist die fehlende Zeit und die Sicherheit, was die bestimmten Funktionen der gekauften Geräte angeht. Leider ist das Anschließen und Starten von NETGEAR GS724TS-100NAS zu wenig. Eine Anleitung beinhaltet eine Reihe von Hinweisen bezüglich bestimmter Funktionen, Sicherheitsgrundsätze, Wartungsarten (sogar das, welche Mittel man benutzen sollte), eventueller Fehler von NETGEAR GS724TS-100NAS und Lösungsarten für Probleme, die während der Nutzung auftreten könnten. Immerhin kann man in der Gebrauchsanleitung die Kontaktnummer zum Service NETGEAR finden, wenn die vorgeschlagenen Lösungen nicht wirksam sind. Aktuell erfreuen sich Anleitungen in Form von interessanten Animationen oder Videoanleitungen an Popularität, die den Nutzer besser ansprechen als eine Broschüre. Diese Art von Anleitung gibt garantiert, dass der Nutzer sich das ganze Video anschaut, ohne die spezifizierten und komplizierten technischen Beschreibungen von NETGEAR GS724TS-100NAS zu überspringen, wie es bei der Papierform passiert.

Warum sollte man Gebrauchsanleitungen lesen?

In der Gebrauchsanleitung finden wir vor allem die Antwort über den Bau sowie die Möglichkeiten des Geräts NETGEAR GS724TS-100NAS, über die Nutzung bestimmter Accessoires und eine Reihe von Informationen, die erlauben, jegliche Funktionen und Bequemlichkeiten zu nutzen.

Nach dem gelungenen Kauf des Geräts, sollte man einige Zeit für das Kennenlernen jedes Teils der Anleitung von NETGEAR GS724TS-100NAS widmen. Aktuell sind sie genau vorbereitet oder übersetzt, damit sie nicht nur verständlich für die Nutzer sind, aber auch ihre grundliegende Hilfs-Informations-Funktion erfüllen.

Inhaltsverzeichnis der Gebrauchsanleitungen

  • Seite 1

    February 2012 202-10484-04 v1.0 350 East Plumeria Drive San Jose, CA 95134 USA GS716T and GS724T Smart Switches Software Administration Manual[...]

  • Seite 2

    2 | GS716Tv2 and GS724Tv3 Software Administration Manual ©2012 NETGEAR, Inc. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. Technical Support Thank you for choosing[...]

  • Seite 3

    Table of Contents | 3 Table of Contents Chapter 1 Getting Started Getting Started with the GS716T and GS724T Gigabit Smart Switches . . 10 Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Connecting the Switch to the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Switch Discovery[...]

  • Seite 4

    GS716Tv2 and GS724Tv3 Software Administration Manual 4 | Table of Contents Services — DHCP Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 DHCP Filtering Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Seite 5

    GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents | 5 DSCP to Queue Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135 Defining DiffServ . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

  • Seite 6

    GS716Tv2 and GS724Tv3 Software Administration Manual 6 | Table of Contents Chapter 6 Monitoring the System Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200 Switch Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201 Port Statistics . . .[...]

  • Seite 7

    GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents | 7 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246 System Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 Management . . . . . . . . . . . . . . . . . . . . . . . . [...]

  • Seite 8

    GS716Tv2 and GS724Tv3 Software Administration Manual 8 | Table of Contents[...]

  • Seite 9

    Chapter 1: Getting Started | 9 1. Getting Started 1 The NETGEAR ® GS716T and GS724T Smart Switch Software Administration Manual describes how to configure and operate the GS716T and GS724T Gigabit Smart Switches by using the Web-based graphical user interface (GUI). This manual describes the software configuration procedures and explains the optio[...]

  • Seite 10

    10 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Getting Started with the GS716T and GS724T Gigabit Smart Switches This chapter provides an overview of starting your NETGEAR GS716T or GS724T Smart Switch and accessing the user interface. It also leads you through the steps to use the Smart Control Center utility.[...]

  • Seite 11

    Chapter 1: Getting Started | 11 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Management Interface The NETGEAR GS716T and GS724T Smart Switches contain embedded Web server and management software for managing and monitoring switch functions. The switches function as a simple switch without the management software. However, you can use[...]

  • Seite 12

    12 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Connecting the Switch to the Network To enable remote management of the switch through a Web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway). The switch has a de[...]

  • Seite 13

    Chapter 1: Getting Started | 13 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network with a DHCP Server This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default. When you connect it to your network, the DHCP server will automatically assig[...]

  • Seite 14

    14 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Use your Web browser to manage your switch. The default password is password . Then use this page to proceed to management of the switch covered in Using the Web Interface on page 24.[...]

  • Seite 15

    Chapter 1: Getting Started | 15 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network without a DHCP Server This section describes how to use the Smart Control Center to set up your switch in a network without a DHCP server. If your network has no DHCP service, you must assign a static IP address to your switch. If you [...]

  • Seite 16

    16 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 9. Click Apply to configure the switch with the network settings. Please ensure that your PC and the switch are in the same subnet. Make a note of these settings for later use. Configuring the Network Settings on the Administrative System If you choose not to use t[...]

  • Seite 17

    Chapter 1: Getting Started | 17 GS716Tv2 and GS724Tv3 Software Administration Manual To modify the network settings on your administrative system: 1. On your PC, access the MS Windows operating system TCP/IP Properties. 2. Set the IP address of the administrative system to an address in the 192.168.0.0 network, such as 192.168.0.200. The IP address[...]

  • Seite 18

    18 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Web Access To access the GS716T or GS724T management interface, use one of the following methods: • From the Smart Control Center, select the switch and click Web Browser Access . • Open a Web browser and enter the IP address of the switch in the address field.[...]

  • Seite 19

    Chapter 1: Getting Started | 19 GS716Tv2 and GS724Tv3 Software Administration Manual Smart Control Center Utilities In addition to device discovery and network address assignment, the Smart Control Center includes several maintenance features. This section describes the following Smart Control Center utilities: • Network Utilities on page 19 • [...]

  • Seite 20

    20 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click OK. 5. Enter the switch password and click Apply . The file is uploaded to the administrative computer as a *.cfg file. You can open it and view the contents with a text editor. To restore the configuration to a previously saved version: 1. Click the Maint[...]

  • Seite 21

    Chapter 1: Getting Started | 21 GS716Tv2 and GS724Tv3 Software Administration Manual Firmware Upgrade The application software for the GS716T and GS724T Smart Switches is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available. The upgrade procedure and the required equipment are describe[...]

  • Seite 22

    22 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 7. When the process is complete, the switch automatically reboots. Note: Click the Tasks tab to view status information about the firmware upgrade. WARNING! It is important that you do not power-off the administrative system or the switch while the firmware upgrade[...]

  • Seite 23

    Chapter 1: Getting Started | 23 GS716Tv2 and GS724Tv3 Software Administration Manual Viewing and Managing Tasks From the Tasks tab, you can view information about configuration downloads and firmware upgrades that have already occurred, are in progress, or are scheduled to take place at a later time. You can also delete or reschedule selected tasks[...]

  • Seite 24

    24 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Understanding the User Interfaces The switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: • Web user interface • Simple Network Management Protocol (SNMP) Each of [...]

  • Seite 25

    Chapter 1: Getting Started | 25 GS716Tv2 and GS724Tv3 Software Administration Manual Figure 1. Administrative Page Layout Navigation Tabs, Feature Links, and Page Menu The navigation tabs along the top of the Web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which f[...]

  • Seite 26

    26 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Configuration and Status Options The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select. On pages that contain configuration options, you can input information into fields[...]

  • Seite 27

    Chapter 1: Getting Started | 27 GS716Tv2 and GS724Tv3 Software Administration Manual If you click the graphic, but do not click a specific port, the main menu appears, as the following figure shows. This menu contains the same option as the navigation tabs at the top of the page.[...]

  • Seite 28

    28 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Help Page Access Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Addressing page is open, the help topic for that page d[...]

  • Seite 29

    Chapter 1: Getting Started | 29 GS716Tv2 and GS724Tv3 Software Administration Manual Interface Naming Convention The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by[...]

  • Seite 30

    30 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 31

    Chapter 2: Configuring System Information | 31 2. Configuring System Information 2 Use the features in the System tab to define the switch’s relationship to its environment. The System tab contains links to the following features: • Management on page 32 • License Key on page 47 • SNMP on page 47 • LLDP on page 52 • Services — DHCP Fi[...]

  • Seite 32

    32 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Management This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information. From the Management link, you can access the follow[...]

  • Seite 33

    Chapter 2: Configuring System Information | 33 GS716Tv2 and GS724Tv3 Software Administration Manual To define system information: 1. Open the System Information page. 2. Define the following fields: • System Name . Enter the name you want to use to identify this switch. You may use up to 31 alphanumeric characters. The factory default is blank. ?[...]

  • Seite 34

    34 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the network information for the management interface: 1. Select the appropriate radio button to determine how to configure the network information for the switch management interface: • Dynamic IP Address (DHCP). Specifies that the swi[...]

  • Seite 35

    Chapter 2: Configuring System Information | 35 GS716Tv2 and GS724Tv3 Software Administration Manual port VLAN ID (PVID) of the port to be connected in that management VLAN be the same as the management VLAN ID. The management VLAN has the following requirements: • Only one management VLAN can be active at a time. • When a new management VLAN is[...]

  • Seite 36

    36 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual SNTP time definitions are assessed and determined by the following time levels: • T1 : Time at which the original request was sent by the client. • T2 : Time at which the original request was received by the server. • T3 : Time at which the ser[...]

  • Seite 37

    Chapter 2: Configuring System Information | 37 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the time by using the CPU clock cycle as the source: 1. From the Clock Source field, select Local . 2. In the Date field, enter the date in the DD/MM/YYYY format. 3. In the Time field, enter the time in HH:MM:SS format. Note: If you do n[...]

  • Seite 38

    38 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual 2. Use the menu to select the Coordinated Universal Time (UTC) time zone in which the switch is located, expressed as the number of hours. 3. Click Apply to send the updated configuration to the switch. Configuration changes take effect immediately. [...]

  • Seite 39

    Chapter 2: Configuring System Information | 39 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. SNTP Server Configuration Use the SNTP Server Configuration page to view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. To displ[...]

  • Seite 40

    40 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual • Priority . Specifies the priority of this server entry in determining the sequence of servers to which SNTP requests are sent. Enter a priority from 1–3, with 1 being the default and the highest priority. Servers with lowest numbers have priori[...]

  • Seite 41

    Chapter 2: Configuring System Information | 41 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. Denial of Service Use the Denial of Service (DoS) page to configure DoS control. The switch software provides support for classifying and blocking specific types of DoS att[...]

  • Seite 42

    42 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the Auto- DoS feature: 1. Select a radio button to enable or disable Auto-DoS: • Disable . Auto-DoS is disabled (default). • Enable . Auto-DoS is enabled. 2. Click Apply to send the updated configuration to the switch. Configuration [...]

  • Seite 43

    Chapter 2: Configuring System Information | 43 GS716Tv2 and GS724Tv3 Software Administration Manual to drop packets that have a TCP header smaller than the configured Min TCP Hdr Size. The factory default is Disable. • Denial of Service Min TCP Hdr Size . Specify the Min TCP Hdr Size allowed. If First Fragment DoS prevention is enabled, the switc[...]

  • Seite 44

    44 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the global DNS settings: 1. Specify whether to enable or disable the administrative status of the DNS Client. • Enable . Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. • Disable . Prevent the switc[...]

  • Seite 45

    Chapter 2: Configuring System Information | 45 GS716Tv2 and GS724Tv3 Software Administration Manual To add a static entry to the local DNS table: 1. Specify the static host name to add. Enter up to 158 characters. 2. Specify the IP address in standard IPv4 dot notation to associate with the hostname. 3. Click Add . The entry appears in the list bel[...]

  • Seite 46

    46 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Green Ethernet Configuration Use this page to configure Green Ethernet features. Using the Green Ethernet features allows for power consumption savings. To access this page, click System  Management  Green Ethernet Configuration . To configure [...]

  • Seite 47

    Chapter 2: Configuring System Information | 47 GS716Tv2 and GS724Tv3 Software Administration Manual License Key This page provides information about available License Keys for various features. By default those License Keys are not available. If License Key for feature is not available, the user will not be allowed to configure this functionality. [...]

  • Seite 48

    48 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Community Configuration To display this page, click System  SNMP  SNMP V1/V2  Community Configuration . By default, two SNMP Communities exist: • Private, with Read/Write privileges and status set to Enable . • Public, with Read Only pri[...]

  • Seite 49

    Chapter 2: Configuring System Information | 49 GS716Tv2 and GS724Tv3 Software Administration Manual • Community String . Specify a community name. A valid entry is a case-sensitive string of up to 16 characters. • Access Mode . Specify the access level for this community by selecting Read/Write or Read Only from the menu. • Status . Specify t[...]

  • Seite 50

    50 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual 2. To modify information about an existing SNMP recipient, select the check box next to the recipient, change the desired fields, and then click Apply . Configuration changes take effect immediately. 3. To delete a recipient, select the check box nex[...]

  • Seite 51

    Chapter 2: Configuring System Information | 51 GS716Tv2 and GS724Tv3 Software Administration Manual SNMP v3 User Configuration This is the configuration for SNMP v3. To access this page, click System  SNMP  SNMP V3  User Configuration . The SNMPv3 Access Mode is a read-only field that shows the access privileges for the user account. The a[...]

  • Seite 52

    52 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and det[...]

  • Seite 53

    Chapter 2: Configuring System Information | 53 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global LLDP settings: 1. Configure the following LLDP properties. • TLV Advertised Interval . Specify the interval at which frames are transmitted. The default is 30 seconds, and the valid range is 1–32768 seconds. • Hold Multiplie[...]

  • Seite 54

    54 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure LLDP port settings: 1. Change the LLDP port settings described below: • Interface. Specifies the port to be affected by these parameters. • Admin Status . Select the status for transmitting and receiving LLDP packets: • Tx Only : E[...]

  • Seite 55

    Chapter 2: Configuring System Information | 55 GS716Tv2 and GS724Tv3 Software Administration Manual • Tx and Rx : Enable both transmitting and receiving LLDP PDUs on the selected ports. • Disabled : Do not transmit or receive LLDP PDUs on the selected ports. • Management IP Address. Choose whether to advertise the management IP address from t[...]

  • Seite 56

    56 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. LLDP-MED Port Settings Use this page to enable LLDP-MED mode on an interface and configure its properties. To display this page, click System  LLDP  Advanced  LLDP[...]

  • Seite 57

    Chapter 2: Configuring System Information | 57 GS716Tv2 and GS724Tv3 Software Administration Manual 3. From the Notification field, specify whether the port should send a topology change notification if a device is connected or removed. 4. From the Transmit Optional TLVs field, specify whether the port should transmit optional type length values (T[...]

  • Seite 58

    58 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the LLDP local information that displays for each port. Field Description Interface Select the interface with the information to display. Port ID Subtype Identifies the type of data displayed in the Port ID field. Port I[...]

  • Seite 59

    Chapter 2: Configuring System Information | 59 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. To view additional details about a port, click the name of the port in the Interface column of the Port Information table. A popup window displays information for the selec[...]

  • Seite 60

    60 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Neighbors Information Use the LLDP Neighbors Information page to view the data that a specified interface has received from other LLDP-enabled systems. To display the LLDP Neighbors Information page, click System > LLDP > Advanced > Neighbor[...]

  • Seite 61

    Chapter 2: Configuring System Information | 61 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information that displays for all LLDP neighbors that have been discovered. Click Refresh to update the information on the screen with the most current data. To view additional information about the remote device, cl[...]

  • Seite 62

    62 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Port Details Local Port Displays the interface on the local system that received LLDP information from a remote system. MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device. Basic Details Chas[...]

  • Seite 63

    Chapter 2: Configuring System Information | 63 GS716Tv2 and GS724Tv3 Software Administration Manual Address Specifies the advertised management address of the remote system. Interface SubType Specifies the port subtype. Interface Number Identifies the port on the remote device that sent the information. MAC/PHY Details Auto-Negotiation Supported Sp[...]

  • Seite 64

    64 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Asset ID Displays the asset ID advertised by the remote device. Location Information Civic Displays the physical location, such as the street address, the remote device has advertised in the location TLV. For example, 123 45th St. E. The field value [...]

  • Seite 65

    Chapter 2: Configuring System Information | 65 GS716Tv2 and GS724Tv3 Software Administration Manual Services — DHCP Filtering DHCP Filtering is a useful feature that can be employed as a security measure against unauthorized DHCP servers. A known attack is when an unauthorized DHCP server responds to a client that is requesting an IP address. The[...]

  • Seite 66

    66 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Interface Configuration Use the DHCP Filtering Interface Configuration page to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (o[...]

  • Seite 67

    Chapter 2: Configuring System Information | 67 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To configure DHCP filtering settings for both physical ports and LAGs, click ALL . 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select th[...]

  • Seite 68

    68 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 69

    Chapter 3: Configuring Switching Information | 69 3. Configuring Switching Information 3 Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features: • Ports on page 70 • Link Aggregation Groups on page 74 • VLANs on page 80 • Voice VLAN on page 86 • Auto-VoIP on page 90 •[...]

  • Seite 70

    70 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch. From the Ports link, you can access the following pages: • Port Configuration on page 70 • Flow Control on page[...]

  • Seite 71

    Chapter 3: Configuring Switching Information | 71 GS716Tv2 and GS724Tv3 Software Administration Manual To configure port settings: 1. To configure settings for a physical port, click PORTS . 2. To configure settings for a Link Aggregation Group (LAG), click LAGS .[...]

  • Seite 72

    72 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 3. To configure settings for both physical ports and LAGs, click ALL . 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box [...]

  • Seite 73

    Chapter 3: Configuring Switching Information | 73 GS716Tv2 and GS724Tv3 Software Administration Manual 6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 7. If you make any changes to the page, click Apply to apply the changes to the system. Flow Control IEEE 802.3x flow con[...]

  • Seite 74

    74 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, [...]

  • Seite 75

    Chapter 3: Configuring Switching Information | 75 GS716Tv2 and GS724Tv3 Software Administration Manual LAG Configuration Use the LAG (Port Channel) Configuration page to group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel. The switch treats the LAG as if it w[...]

  • Seite 76

    76 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • Active Ports . A listing of the ports that are actively participating members of this Port Channel. A maximum of 4 ports can be assigned to a port channel. • LAG State . Indicates whether the link is Up or Down. 3. Click Cancel to cancel the[...]

  • Seite 77

    Chapter 3: Configuring Switching Information | 77 GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click the box below each port to include in the LAG. The following figure shows an example of how to configure LAG1 with ports e1–e4 as members. 5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the[...]

  • Seite 78

    78 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 4. If you make any changes to this page, click Apply to send the updated configuration to the switch. Configuration chang[...]

  • Seite 79

    Chapter 3: Configuring Switching Information | 79 GS716Tv2 and GS724Tv3 Software Administration Manual Note: You cannot select ports that are not participating in a LAG 2. Configure the LACP Priority value for the selected port. The field range is 0–255. The default value is 128. 3. Configure the administrative LACP Timeout value. • Long . Spec[...]

  • Seite 80

    80 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual VLANs Adding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the ne[...]

  • Seite 81

    Chapter 3: Configuring Switching Information | 81 GS716Tv2 and GS724Tv3 Software Administration Manual To configure VLANs: 1. To add a VLAN, configure the VLAN ID, name, and type, and then click Add . • VLAN ID . Specify the VLAN Identifier for the new VLAN. (You can enter data in this field only when you are creating a new VLAN.) The range of th[...]

  • Seite 82

    82 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To display the VLAN Membership Configuration page, click Switching  VLAN  Advanced  VLAN Membership . To configure VLAN membership: 1. From the VLAN ID field, select the VLAN to which you want to add ports. 2. Click the orange bar belo[...]

  • Seite 83

    Chapter 3: Configuring Switching Information | 83 GS716Tv2 and GS724Tv3 Software Administration Manual • Tag All : Select the ports on which all frames transmitted for this VLAN will be tagged. All the ports will be included in the VLAN. • Remove All : This selection has the effect of excluding all ports from the selected VLAN. 6. Click Cancel [...]

  • Seite 84

    84 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure PVID information: 1. To configure PVID settings for a physical port, click PORTS . 2. To configure PVID settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure PVID settings for both physical ports and LAGs, click AL[...]

  • Seite 85

    Chapter 3: Configuring Switching Information | 85 GS716Tv2 and GS724Tv3 Software Administration Manual 6. Specify how you want the port to handle untagged and priority tagged frames. Whichever you select, VLAN tagged frames will be forwarded in accordance with the IEEE 802.1Q VLAN standard. The factory default is Admit All. • VLAN Only : The port[...]

  • Seite 86

    86 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Voice VLAN Configure the Voice VLAN settings for ports that carry traffic from IP phones. The Voice VLAN feature can help ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high. Fro[...]

  • Seite 87

    Chapter 3: Configuring Switching Information | 87 GS716Tv2 and GS724Tv3 Software Administration Manual 5. From the Voice VLAN Aging Time field, specify the amount of time after the last IP phone’s OUI is aged out for a specific port. The port will age out after the bridge and voice aging time. 6. Click Cancel to cancel the configuration on the sc[...]

  • Seite 88

    88 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure Voice VLAN port settings: 1. Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports. 2. From the Voice VLAN Mode menu, specify whether to enable or disab[...]

  • Seite 89

    Chapter 3: Configuring Switching Information | 89 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 90

    90 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Auto-VoIP The Auto-VoIP automatically makes sure that time-sensitive voice traffic is given priority over data traffic on ports that have this feature enabled. Auto-VoIP checks for packets carrying the following VoIP protocols: • Session Initiat[...]

  • Seite 91

    Chapter 3: Configuring Switching Information | 91 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Auto-VoIP settings: 1. Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports. 2. From the Auto-VoIP Mode menu, specify whether to enable or disable Auto[...]

  • Seite 92

    92 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure OUI settings: 1. To add a new OUI prefix, type the VOIP OUI prefix in the Telephony OUI(s) field, provide a description of the prefix, and click Add . The OUI prefix must be in the format AA:BB:CC. 2. To delete an OUI prefix from the [...]

  • Seite 93

    Chapter 3: Configuring Switching Information | 93 GS716Tv2 and GS724Tv3 Software Administration Manual Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common STP, [...]

  • Seite 94

    94 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure STP settings on the switch: 1. From the Spanning Tree State field, specify whether to enable or disable Spanning Tree operation on the switch. 2. From the STP Operation Mode field, Specifies the Force Protocol Version parameter for th[...]

  • Seite 95

    Chapter 3: Configuring Switching Information | 95 GS716Tv2 and GS724Tv3 Software Administration Manual 6. If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes occur immediately. The following table describes the STP Status information displayed on the screen. Click Refresh to upda[...]

  • Seite 96

    96 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST settings: 1. Specify values for CST in the appropriate fields: • Bridge Priority . When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes [...]

  • Seite 97

    Chapter 3: Configuring Switching Information | 97 GS716Tv2 and GS724Tv3 Software Administration Manual 3. If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes take place immediately. The following table describes the MSTP status information displayed on the Spanning Tree CST Confi[...]

  • Seite 98

    98 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST port settings: 1. To configure CST settings for a physical port, click PORTS . 2. To configure CST settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure CST settings for both physical ports and LAGs, click ALL [...]

  • Seite 99

    Chapter 3: Configuring Switching Information | 99 GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Link . Specifies if the specified port is an Edge Port with the CST. Possible values are Enable or Disable. The default is Disable. • Port State . The Forwarding state of this port. This field is read-only. • Path Cost . Set the Path [...]

  • Seite 100

    100 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the CST Status information displayed on the screen.[...]

  • Seite 101

    Chapter 3: Configuring Switching Information | 101 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. Field Description Interface Select a physical or port channel interface to configure. The port is associated with the VLAN(s) associated with the CST. Port Role Eac[...]

  • Seite 102

    102 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Rapid STP Use the Rapid STP page to view information about Rapid Spanning Tree (RSTP) port status. To display the Rapid STP page, click Switching > STP > Advanced  RSTP . The following table describes the Rapid STP Status information dis[...]

  • Seite 103

    Chapter 3: Configuring Switching Information | 103 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. MST Configuration Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch. To display the Spanning Tree MST Configurati[...]

  • Seite 104

    104 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • VLAN ID . The menu contains all VLANs configured on the switch. Select a VLAN to associate with the MST instance. 2. To delete an MST instance, select the check box next to the instance and click Delete . 3. To modify an MST instance, select [...]

  • Seite 105

    Chapter 3: Configuring Switching Information | 105 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 106

    106 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Note: If no MST instances have been configured on the switch, the page displays a “No MSTs Available” message. To configure MST port settings: 1. To configure MST settings for a physical port, click PORTS . 2. To configure MST settings for a [...]

  • Seite 107

    Chapter 3: Configuring Switching Information | 107 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the screen with the latest MST information. STP Statistics Use the Spanning Tree Statistics page to view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To[...]

  • Seite 108

    108 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the STP Statistics page. Click Refresh to update the screen with the latest STP statistics information. Field Description Interface Select a physical or port channel interface to view its[...]

  • Seite 109

    Chapter 3: Configuring Switching Information | 109 GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. From the Multicast link, you can access the following pages: • Auto-V[...]

  • Seite 110

    110 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group. Host groups are identif[...]

  • Seite 111

    Chapter 3: Configuring Switching Information | 111 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping: 1. Enable or disable IGMP Snooping on the switch. • Enable . The switch snoops all IGMP packets it receives to determine which segments should receive packets directed to the group address. • Disable . The switch d[...]

  • Seite 112

    112 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table displays information about the global IGMP snooping status and statistics on the page. IGMP Snooping Interface Configuration Use the IGMP Snooping Interface Configuration page to configure IGMP snooping settings on specific in[...]

  • Seite 113

    Chapter 3: Configuring Switching Information | 113 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping interface settings: 1. To configure IGMP Snooping settings for a physical port, click PORTS . 2. To configure IGMP Snooping settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure IGMP Snooping setting[...]

  • Seite 114

    114 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Leave Admin Mode . Select the Fast Leave mode for a particular interface from the menu. The default is Disable. 6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.[...]

  • Seite 115

    Chapter 3: Configuring Switching Information | 115 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear one or all of the IGMP Snooping entries. • Click Refresh to reload the page and display the most current information. Multicast Forwarding Data[...]

  • Seite 116

    116 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. MFDB Statistics Use the multicast forwarding database Statistics page to view statistical information about the MFDB table. To access the MFDB Statistics page, clic[...]

  • Seite 117

    Chapter 3: Configuring Switching Information | 117 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the MFDB Statistics page: Click Refresh to update the information on the screen with the most current data. IGMP Snooping VLAN Configuration Use the IGMP Snooping VLAN Configuration page [...]

  • Seite 118

    118 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP snooping settings for VLANs: 1. To enable IGMP snooping on a VLAN, enter the VLAN ID in the appropriate field and configure the IGMP Snooping values: • Fast Leave Admin Mode . Enable or disable the IGMP Snooping Fast Leave Mod[...]

  • Seite 119

    Chapter 3: Configuring Switching Information | 119 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To disable IGMP snooping on a VLAN and remove it from the list, select the check box next to the VLAN ID and click Delete . 4. To modify IGMP snooping settings for a VLAN, select the check box next to the VLAN ID, update the desired values, an[...]

  • Seite 120

    120 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 1. From the Querier Admin Mode field, enable or disable the administrative mode for IGMP Snooping Querier. 2. In the Snooping Querier Address field, specify the IP address to be used as source address in periodic IGMP queries. This address is use[...]

  • Seite 121

    Chapter 3: Configuring Switching Information | 121 GS716Tv2 and GS724Tv3 Software Administration Manual • Disabled . Upon seeing another querier of the same version in the VLAN, the snooping querier moves to the non-querier state. • Enabled . The snooping querier participates in querier election, in which the least IP address operates as the qu[...]

  • Seite 122

    122 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to redisplay the page with the latest information from the switch. Forwarding Database The forwarding database maintains a list of MAC addresses after having received a packet from this MAC address. The transparent bridging function[...]

  • Seite 123

    Chapter 3: Configuring Switching Information | 123 GS716Tv2 and GS724Tv3 Software Administration Manual To access this page, click Switching  Address Table  Basic  Address Table . To search for an entry in the MAC Address Table: 1. Use the Search By field to search for MAC Addresses by MAC Address , VLAN ID , or Interface . • MAC Addr[...]

  • Seite 124

    124 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available for each entry in the address table. Dynamic Address Configuration Use the Dynamic Addresses page to set the amount of time to keep a learned MAC address entry in the forwarding database. Th[...]

  • Seite 125

    Chapter 3: Configuring Switching Information | 125 GS716Tv2 and GS724Tv3 Software Administration Manual Note: IEEE 802.1D recommends a default of 300 seconds, which is the factory default. 2. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 3. Click Apply to apply to send the[...]

  • Seite 126

    126 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 127

    Chapter 4: Configuring Quality of Service | 127 4. Configuring Quality of Service 4 Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab contains links to the following features: • Class of Service on page 128 • Differentiated Services on page 135 In a typical switch, each physical port consi[...]

  • Seite 128

    128 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not requ[...]

  • Seite 129

    Chapter 4: Configuring Quality of Service | 129 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global CoS settings: 1. Select the Global radio button to configure the trust mode settings that apply to all interfaces. Alternatively, you can select the Interface radio button to apply trust mode settings to individual interfaces. Th[...]

  • Seite 130

    130 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To configure CoS settings for an interface: 1. To configure CoS settings for a physical port, click PORTS . 2. To configure CoS settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure CoS settings for both physical ports and LAGs, [...]

  • Seite 131

    Chapter 4: Configuring Quality of Service | 131 GS716Tv2 and GS724Tv3 Software Administration Manual Interface Queue Configuration Use the Interface Queue Configuration page to define what a particular queue does by configuring switch egress queues. User-configurable parameters control the amount of bandwidth used by the queue, the queue depth duri[...]

  • Seite 132

    132 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Queue ID . Use the menu to select the queue to be configured. • Minimum Bandwidth . Enter a percentage of the maximum negotiated bandwidth for the selected queue on the interface. Specify a percentage from 0–100, in increments of 1. • Sche[...]

  • Seite 133

    Chapter 4: Configuring Quality of Service | 133 GS716Tv2 and GS724Tv3 Software Administration Manual If you map 802.1p priorities to individual interfaces, select the Interface radio button and then select the interface from the drop-down menu. The interface settings override the global settings for 802.1p priority mapping. 2. Select the queue to m[...]

  • Seite 134

    134 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To map DSCP values to queues: 1. For each DSCP value, select a hardware queue to associate with the value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower qu[...]

  • Seite 135

    Chapter 4: Configuring Quality of Service | 135 GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks ar[...]

  • Seite 136

    136 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual Diffserv Configuration Use the Diffserv Configuration page to display DiffServ General Status Group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ pr[...]

  • Seite 137

    Chapter 4: Configuring Quality of Service | 137 GS716Tv2 and GS724Tv3 Software Administration Manual Class Configuration Use the Class Configuration page to add a new DiffServ class name, or to rename or delete an existing class. The page also allows you to define the criteria to associate with a DiffServ class. As packets are received, these DiffS[...]

  • Seite 138

    138 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class.[...]

  • Seite 139

    Chapter 4: Configuring Quality of Service | 139 GS716Tv2 and GS724Tv3 Software Administration Manual 2. Define the criteria to associate with a DiffServ class: • Reference Class . Selects a class to start referencing for criteria. A specified class can reference at most one other class of the same type. • Class of Service . Select the field and[...]

  • Seite 140

    140 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Destination IP Address. Requires a packet’s destination port IP address to match the address listed here. In the IP Address field, enter a valid destination IP address in dotted decimal format. • Destination Mas k. Enter a valid subnet mask [...]

  • Seite 141

    Chapter 4: Configuring Quality of Service | 141 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a DiffServ policy: 1. To create a new policy, enter a policy name in the Policy Selector field, select the existing DiffServ class to associate with the policy, and click Add . The available policy type is In, which indicates the type i[...]

  • Seite 142

    142 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual The policy name is a hyperlink. The following figure shows the configuration fields for the policy.[...]

  • Seite 143

    Chapter 4: Configuring Quality of Service | 143 GS716Tv2 and GS724Tv3 Software Administration Manual 2. Select the queue to which packets will of this policy-class will be assigned. 3. Configure the policy attributes:. • Drop . Select this option to drop packets for this policy-class. • Mark CoS . Enter the specified Class of Service queue numb[...]

  • Seite 144

    144 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Simple Policy . Use this attribute to establish the traffic policing style for the specified class. The simple form of the policy command uses a single data rate and burst size, resulting in two outcomes: confirm and violate. 4. If you select th[...]

  • Seite 145

    Chapter 4: Configuring Quality of Service | 145 GS716Tv2 and GS724Tv3 Software Administration Manual • Mark IP DSCP . These packets are marked by DiffServ with the specified DSCP value before being presented to the system forwarding element. This selection requires that the DSCP value field be set. 5. Click Cancel to cancel the configuration on t[...]

  • Seite 146

    146 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces. 5. To ac[...]

  • Seite 147

    Chapter 4: Configuring Quality of Service | 147 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the page with the most current information. Discarded Packets Displays the total number of packets discarded for all class instances in this service policy for any reason due to DiffServ treatment. This is the overall count p[...]

  • Seite 148

    148 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 149

    Chapter 5: Managing Device Security | 149 5. Managing Device Security 5 Use the features available from the Security tab to configure management security settings for port, user, and server security. The Security tab contains links to the following features: • Management Security Settings on page 150 • Configuring Management Access on page 161 [...]

  • Seite 150

    150 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Management Security Settings From the Management Security Settings page, you can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS+) settings, and authentica[...]

  • Seite 151

    Chapter 5: Managing Device Security | 151 GS716Tv2 and GS724Tv3 Software Administration Manual Note: In the case of a lost password, press the Factory Default Reset button on the front panel for more than one second to restore the factory default. The reset button will only reboot the device. RADIUS Configuration RADIUS servers provide additional s[...]

  • Seite 152

    152 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual configured as the primary server. If no servers are configured as the primary server, the current server is the most recently added RADIUS server. To configure global RADIUS server settings: 1. In the Max Number of Retransmits field, specify the value of [...]

  • Seite 153

    Chapter 5: Managing Device Security | 153 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a RADIUS server: 1. To add a RADIUS server, specify the settings the following list describes, and click Add . • In the Server Address field, specify the IP address of the RADIUS server to add. • In the Authentication Port field, specify [...]

  • Seite 154

    154 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear Counters to clear the authentication server and RADIUS statistics to their default values. • Click Refresh to refresh the page with the most current data from th[...]

  • Seite 155

    Chapter 5: Managing Device Security | 155 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the RADIUS accounting server: 1. In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. 2. In the Port field, specify the UDP port number the server uses to verify the RADIUS accounting server a[...]

  • Seite 156

    156 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes RADIUS accounting server statistics available on the page. Use the buttons at the bottom of the page to perform the following actions: • Click Clear Counters to reset all statistics to their default value. • Click Refresh[...]

  • Seite 157

    Chapter 5: Managing Device Security | 157 GS716Tv2 and GS724Tv3 Software Administration Manual The TACACS+ protocol ensures network security through encrypted protocol exchanges between the device and TACACS+ server. The TACACS+ folder contains links to the following features: • Configuring TACACS+ on page 156 • TACACS+ Server Configuration on [...]

  • Seite 158

    158 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure TACACS+ server settings: 1. To add a new TACACS+ server, select Add from the TACACS+ Server field, enter the IP address of the server to add, and click Apply . Note: The Add option is available if fewer than five TACACS+ servers are configure[...]

  • Seite 159

    Chapter 5: Managing Device Security | 159 GS716Tv2 and GS724Tv3 Software Administration Manual Authentication List Configuration Use the Authentication List page to configure the default login list. A login list specifies one or more authentication methods to validate switch or port access for the admin user. Note: Admin is the only user on the sys[...]

  • Seite 160

    160 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual 3. Use the menu in the 2 column to select the authentication method, if any, that should appear second in the selected authentication login list. This is the method that will be used if the first method times out. If you select a method that does not time[...]

  • Seite 161

    Chapter 5: Managing Device Security | 161 GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the GS716T or GS724T management interface. You can also configure Access Control Profiles and Access Rules. The Security  Access tab contains the follo[...]

  • Seite 162

    162 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual This timeout is unaffected by the activity level of the session. The value must be in the range of (0–168) hours. A value of zero corresponds to an infinite timeout. The default value is 24 hours. The currently configured value is shown when the Web pag[...]

  • Seite 163

    Chapter 5: Managing Device Security | 163 GS716Tv2 and GS724Tv3 Software Administration Manual The currently configured value is shown when the Web page is displayed. The default value is Disable. You can only download SSL certificates when the HTTPS Admin mode is disabled. 2. Use the radio buttons in the SSL Version 3 field to enable or disable Se[...]

  • Seite 164

    164 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure the certificate download settings for HTTPS sessions: 1. From the File Type menu, select the type of SSL certificate to download, which can be one of the following: • SSL Trusted Root Certificate PEM File . SSL Trusted Root Certificate File[...]

  • Seite 165

    Chapter 5: Managing Device Security | 165 GS716Tv2 and GS724Tv3 Software Administration Manual Access Profile Configuration Use the Access Profile Configuration page to configure settings that control management access to the switch. Access profile configuration requires three steps: 1. Use the Access Profile Configuration page to create an access [...]

  • Seite 166

    166 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The Profile Summary table shows the rules that are configured for the profile, as the following table describes. Click Refresh to update the page with the most current information. Access Rule Configuration Use the Access Rule Configuration page to config[...]

  • Seite 167

    Chapter 5: Managing Device Security | 167 GS716Tv2 and GS724Tv3 Software Administration Manual To configure access profile rules: 1. To add an access profile rule, configure the following settings and click Add . • Rule Type : Specify whether the rule permits or denies access to the GS716T or GS724T management interface. • Select Permit to allo[...]

  • Seite 168

    168 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Port Authentication In port-based authentication mode, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions. At any given[...]

  • Seite 169

    Chapter 5: Managing Device Security | 169 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global 802.1X settings: 1. Select the appropriate radio button in the Port Based Authentication State field to enable or disable 802.1X administrative mode on the switch. • Enable . Port-based authentication is permitted on the switch. Note[...]

  • Seite 170

    170 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure 802.1X settings for the port:[...]

  • Seite 171

    Chapter 5: Managing Device Security | 171 GS716Tv2 and GS724Tv3 Software Administration Manual 1. Select the check box next to the port to configure. You can also select multiple check boxes to apply the same settings to the select ports, or select the check box in the heading row to apply the same settings to all ports. 2. For the selected port(s)[...]

  • Seite 172

    172 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual • Supplicant Timeout . Defines the amount of time that lapses before EAP requests are resent to the user. The field value is in seconds. The field default is 30 seconds. • Server Timeout . Defines the amount of time that lapses before the switch resen[...]

  • Seite 173

    Chapter 5: Managing Device Security | 173 GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click Initialize to begin the initialization sequence on the selected port(s). This button is only selectable if the control mode is auto . If the button is not selectable, it will be grayed out. When this button is clicked, the action is immediate. It[...]

  • Seite 174

    174 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the fields on the Port Summary page. Click Refresh to update the information on the screen. Traffic Control From the Traffic Control link, you can configure MAC Filters, Storm Control, Port Security, and Protected Port settin[...]

  • Seite 175

    Chapter 5: Managing Device Security | 175 GS716Tv2 and GS724Tv3 Software Administration Manual • Security MAC Address on page 181 • Protected Ports Membership on page 181 MAC Filter Configuration Use the MAC Filter Configuration page to create MAC filters that limit the traffic allowed into and out of specified ports on the system. To display t[...]

  • Seite 176

    176 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual e. Click the orange bar under the Destination Port Members heading to display the available ports. Select the port(s) to include in the outbound filter. Packets with the MAC address and VLAN ID you selected will be transmitted only out of ports that are i[...]

  • Seite 177

    Chapter 5: Managing Device Security | 177 GS716Tv2 and GS724Tv3 Software Administration Manual Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out. The s[...]

  • Seite 178

    178 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual • Disable . Do not use storm control. • Unknown Unicast . If the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. • Multicast . If the [...]

  • Seite 179

    Chapter 5: Managing Device Security | 179 GS716Tv2 and GS724Tv3 Software Administration Manual 3. If you change the mode, click Apply to apply the change to the system. The Port Security Violation table shows information about violations that occurred on ports that are enabled for port security. The following table describes the fields in the Port [...]

  • Seite 180

    180 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure port security settings: 1. To configure port security settings for a physical port, click PORTS. 2. To configure port security settings for a Link Aggregation Group (LAG), click LAGS. 3. To configure port security settings for both physical p[...]

  • Seite 181

    Chapter 5: Managing Device Security | 181 GS716Tv2 and GS724Tv3 Software Administration Manual 7. If you make changes to the page, click Apply to apply the changes to the system. Security MAC Address Use the Security MAC Address page to convert a dynamically learned MAC address to a statically locked address. To display the Security MAC Address pag[...]

  • Seite 182

    182 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To display the Protected Ports Membership page, click the Security  Traffic Control  Protected Ports link. To configure protected ports: 1. Click the orange bar to display the available ports. 2. Click the box below each port to configure as a prote[...]

  • Seite 183

    Chapter 5: Managing Device Security | 183 GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restric[...]

  • Seite 184

    184 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To use the ACL Wizard: 1. Determine the type of ACL to configure and create a MAC ACL, standard IP ACL, or extended IP ACL. • To permit or deny traffic based on the Source MAC Address, create a MAC ACL. • To permit or deny traffic based on the Destina[...]

  • Seite 185

    Chapter 5: Managing Device Security | 185 GS716Tv2 and GS724Tv3 Software Administration Manual 1. Use the MAC ACL page to create the ACL ID. 2. Use the MAC Rules page to create rules for the ACL. 3. Use the MAC Binding Configuration page to assign the ACL by its ID number to a port. 4. Optionally, use the MAC Binding Table page to view the configur[...]

  • Seite 186

    186 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual MAC Rules Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default 'deny all' rule is the last rule of e[...]

  • Seite 187

    Chapter 5: Managing Device Security | 187 GS716Tv2 and GS724Tv3 Software Administration Manual • Deny: Drops packets that meet the ACL criteria. • Assign Queue . Specifies the hardware egress queue identifier used to handle all packets matching this ACL rule. Enter an identifying number from 0–3 in this field. • Redirect Interface . Specifi[...]

  • Seite 188

    188 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual the value given for that bit. The valid format is xx:xx:xx:xx:xx:xx. A MAC mask of 00:00:00:00:00:00 matches a single MAC address. • VLAN . Requires a packet’s VLAN ID to match the ID listed here. Enter the VLAN ID to apply this criteria. The valid ra[...]

  • Seite 189

    Chapter 5: Managing Device Security | 189 GS716Tv2 and GS724Tv3 Software Administration Manual A low number indicates high precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number. If the sequence number is not specifie[...]

  • Seite 190

    190 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information displayed in the MAC Binding Table . To delete a MAC ACL-to-interface binding, select the check box next to the interface and click Delete . IP ACL IP ACLs allow network managers to define classification actio[...]

  • Seite 191

    Chapter 5: Managing Device Security | 191 GS716Tv2 and GS724Tv3 Software Administration Manual The IP ACL area shows the current size of the ACL table versus the maximum size of the ACL table. The current size is equal to the number of configured IPv4 plus the number of configured MAC ACLs. The maximum size is 100. To configure an IP ACL: 1. In the[...]

  • Seite 192

    192 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: 1. To add an IP ACL rule, select the ACL ID to add the rule to, complete the fields described in the following list, and click Add . • Rule ID . Specify a number from 1–10 to identify the IP ACL rule. You can create u[...]

  • Seite 193

    Chapter 5: Managing Device Security | 193 GS716Tv2 and GS724Tv3 Software Administration Manual subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, you type 0.0.0.255 in the Source IP Mask field. This field is required when you configure a source IP addres[...]

  • Seite 194

    194 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: 1. To add an IP ACL rule to an extended IP ACL, select the ACL ID to add the rule to, select the check box in the Extended ACL Rule table, and click Add . Note: The ACL you select must have an ACL ID between 100 and 199. [...]

  • Seite 195

    Chapter 5: Managing Device Security | 195 GS716Tv2 and GS724Tv3 Software Administration Manual • Protocol Type . Requires a packet’s protocol to match the protocol listed here. Select a type from the drop down menu or enter the protocol number in the available field. • Src IP Address . Requires a packet’s source IP address to match the addr[...]

  • Seite 196

    196 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual DSCP value from the menu. To specify a numeric value in the available field, select Other from the menu and type an integer from 0 to 63 in the field. • IP Precedence: The IP Precedence field in a packet is defined as the high-order three bits of the Se[...]

  • Seite 197

    Chapter 5: Managing Device Security | 197 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IP ACL interface bindings: 1. Select an existing IP ACL from the ACL ID menu. The packet filtering direction for ACL is Inbound, which means the IP ACL rules are applied to traffic entering the port. 2. Specify an optional sequence number to [...]

  • Seite 198

    198 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual IP Binding Table Use the IP Binding Table page to view or delete the IP ACL bindings. To display the IP Binding Table, click Security  ACL, then click the Advanced  Binding Table link. The following table describes the information displayed in the M[...]

  • Seite 199

    Chapter 6: Monitoring the System | 199 6. Monitoring the System 6 Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains links to the following features: • Ports on page 200 • System Logs on page 213 • Port [...]

  • Seite 200

    200 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages available from the Ports link contain a variety of information about the number and type of traffic transmitted from and received on the switch. From the Ports link, you can access the following pages: • Switch Statistics on page 201 • Po[...]

  • Seite 201

    Chapter 6: Monitoring the System | 201 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Statistics The Switch Statistics page displays detailed statistical information about the traffic the switch handles. To access the Switch Statistics page, click Monitoring  Ports  Switch Statistics . The following table describes the Switch Sta[...]

  • Seite 202

    202 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Packets Received The total number of packets received that were directed to a multicast address. This number does not include packets directed to the broadcast address. Broadcast Packets Received The total number of packets received that were direc[...]

  • Seite 203

    Chapter 6: Monitoring the System | 203 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the statistics counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. • Click[...]

  • Seite 204

    204 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • To clear all the counters for all ports on the switch, select the check box in the row heading and click Clear . The button resets all statistics for all ports to default values.[...]

  • Seite 205

    Chapter 6: Monitoring the System | 205 GS716Tv2 and GS724Tv3 Software Administration Manual Port Detailed Statistics The Port Detailed Statistics page displays a variety of per-port traffic statistics. To access the Port Detailed page, click the Monitoring  Ports tab, and then click Port Detailed Statistics . (The Port Detailed Statistics figure[...]

  • Seite 206

    206 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Port Channel ID If the port is a member of a port channel, the port channel's interface ID and name are shown. Otherwise, Disable is shown. Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role will[...]

  • Seite 207

    Chapter 6: Monitoring the System | 207 GS716Tv2 and GS724Tv3 Software Administration Manual Packets RX and TX 128-255 Octets The total number of packets (including bad packets) received or transmitted that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets). Packets RX and TX 256-511 Octets The tota[...]

  • Seite 208

    208 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received The total number of good packets received that were directed to a multicast address. This number does not include packets direc[...]

  • Seite 209

    Chapter 6: Monitoring the System | 209 GS716Tv2 and GS724Tv3 Software Administration Manual Reserved Address Discards The number of frames discarded that are destined to an IEEE 802.1 reserved address and are not supported by the system. Broadcast Storm Recovery The number of frames discarded that are destined for FF:FF:FF:FF:FF:FF when Broadcast S[...]

  • Seite 210

    210 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Broadcast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent. Total Transmit Errors The sum of Single, Multiple, and Excessive Collisi[...]

  • Seite 211

    Chapter 6: Monitoring the System | 211 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the counters. This resets all statistics for this port to the default values. • Click Refresh to refresh the data on the screen and display the most cu[...]

  • Seite 212

    212 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the EAP statistics displayed on the screen. Use the buttons at the bottom of the page to perform the following actions: • To clear all the EAP counters for all ports on the switch, select the check box in the row heading and c[...]

  • Seite 213

    Chapter 6: Monitoring the System | 213 GS716Tv2 and GS724Tv3 Software Administration Manual System Logs The switch may generate messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences. These messages are stored locally and can be forwarded to one or more centralized points[...]

  • Seite 214

    214 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Memory Logs The in-memory log stores messages in memory based upon the settings for message component and severity. Use the Memory Logs page to set the administrative status and behavior of logs in the system buffer. These log messages are cleared when the s[...]

  • Seite 215

    Chapter 6: Monitoring the System | 215 GS716Tv2 and GS724Tv3 Software Administration Manual The Memory Log table also appears on the Memory Log page. The rest of the page displays the Memory Log messages. The format of the log message is the same for messages that are displayed for the message log, persistent log, or console log. Messages logged to[...]

  • Seite 216

    216 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual • The second log type is the system operation log . The system operation log stores the last N messages received during system operation. This log always has the log full operation attribute set to overwrite. This log can store up to 1000 messages. Either [...]

  • Seite 217

    Chapter 6: Monitoring the System | 217 GS716Tv2 and GS724Tv3 Software Administration Manual • Critical (2): The third highest warning level. A critical log is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional. • Error (3): A device error has occ[...]

  • Seite 218

    218 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual To configure local log server settings: 1. Use the radio buttons in the Admin Status field to determine whether to send log messages to the remote syslog hosts configured on the switch. • Enable : Messages will be sent to all configured hosts (syslog colle[...]

  • Seite 219

    Chapter 6: Monitoring the System | 219 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To modify the settings for an existing host, select the check box next to the host, change the desired information, and click Apply . 4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the swi[...]

  • Seite 220

    220 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Click Clear Counters to clear all the counters. This resets all statistics for the trap logs to the default values. Event Logs Use the Event Log page to display the event log, which is used to hold error messages for catastrophic events. After the event is l[...]

  • Seite 221

    Chapter 6: Monitoring the System | 221 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear the messages out of the Event Log. • Click Refresh to refresh the data on the screen and display the most current information. Code The event code passed t[...]

  • Seite 222

    222 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Port Mirroring The page under the Mirroring link allows you to view and configure port mirroring on the system. Multiple Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the swit[...]

  • Seite 223

    Chapter 6: Monitoring the System | 223 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Port Mirroring: 1. Select the check box next to a port to configure it as a source port. 2. In the Destination Port field, specify the port to which port traffic is be copied. Use the e1, e2,...format to specify the port. You can configure only [...]

  • Seite 224

    224 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 225

    Chapter 7: Maintenance | 225 7. Maintenance 7 Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: • Reset on page 226 • Upload File From Switch on page 228 • Download File To Switch on page 230 • File Management on page 234 • Troubleshooting on pa[...]

  • Seite 226

    226 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Reset The Reset menu contains links to the following options: • Device Reboot on page 226 • Factory Default on page 226 Device Reboot Use the Device Reboot page to reboot the GS716T or GS724T. To access the Device Reboot page, click Maintenance  Reset  Devic[...]

  • Seite 227

    Chapter 7: Maintenance | 227 GS716Tv2 and GS724Tv3 Software Administration Manual To reset the switch to the factory default settings: 1. Select the check box on the page. 2. Click Apply . The switch resets immediately.[...]

  • Seite 228

    228 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Upload File From Switch The switch supports system file uploads from the switch to a remote system by using TFTP. Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to an TFTP server on the network. To displ[...]

  • Seite 229

    Chapter 7: Maintenance | 229 GS716Tv2 and GS724Tv3 Software Administration Manual 5. In the Transfer File Path field, specify the path on the TFTP server where you want to put the file. You may enter up to 32 characters. Include the backslash at the end of the path. A path name with a space is not accepted. Leave this field blank to save the file t[...]

  • Seite 230

    230 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Download File To Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP. The Download menu contains links to the following options: • TFTP File Download on page 230 • HTTP File Download on page 232 TFTP Fil[...]

  • Seite 231

    Chapter 7: Maintenance | 231 GS716Tv2 and GS724Tv3 Software Administration Manual while the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupt, the system automatically boots from the non-active image. This is a safety feature for faults occurring during the boot upgrade process. • Te[...]

  • Seite 232

    232 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual To activate a software image that you download to the switch, see File Management on page 234. HTTP File Download Use the HTTP File Download page to download files of various types to the switch using an HTTP session (for example, via your Web browser). To display thi[...]

  • Seite 233

    Chapter 7: Maintenance | 233 GS716Tv2 and GS724Tv3 Software Administration Manual • SSL DH Strong Encryption Parameter PEM File : SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). 2. If you are downloading an GS716T or GS724T image (Code), select the image on the switch to overwrite. This field is only visible when Code is select[...]

  • Seite 234

    234 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual File Management The system maintains two versions of the GS716T or GS724T software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts. This feature reduces switch [...]

  • Seite 235

    Chapter 7: Maintenance | 235 GS716Tv2 and GS724Tv3 Software Administration Manual Note: After activating an image, you must perform a system reset of the switch in order to run the new code. 4. To remove the selected image from permanent storage on the switch, select the Delete Image check box. You cannot delete the active image. 5. Click Cancel to[...]

  • Seite 236

    236 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to display the latest information from the switch. For information about how to update or change the system images, see File Management on page 234. Current-active Displays the currently active image on this switch. Next-active Displays the image to be u[...]

  • Seite 237

    Chapter 7: Maintenance | 237 GS716Tv2 and GS724Tv3 Software Administration Manual Troubleshooting The Troubleshooting menu contains links to the following options: • Ping on page 237 • Traceroute on page 238 Ping Use the Ping page to tell the switch to send a Ping request to a specified IP address. You can use this feature to check whether the [...]

  • Seite 238

    238 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual • If successful, you will see “Reply From IP/Host: icmp_seq = 0. time = xx usec. Tx = x, Rx = x Min/Max/Avg RTT = x/x/x msec.” • If a reply to the ping is not received, you will see “Reply From IP/Host: Destination Unreachable. Tx = x, Rx = 0 Min/Max/Avg RTT[...]

  • Seite 239

    Chapter 7: Maintenance | 239 GS716Tv2 and GS724Tv3 Software Administration Manual • MaxFail . Specify the maximum number of failures allowed in the session. The valid range is 0–255. • Interval . Specify the time between probes in seconds. The valid range is 1–60. • Port . Specify the UDP destination port in probe packets. The valid range[...]

  • Seite 240

    240 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 241

    Chapter 8: Help | 241 8. Help 8 Use the features available from the Help tab to connect to online resources for assistance. The Help tab contains a link to Online Help . Online Help The Online Help includes the following pages: • Support on page 241 • User Guide on page 242 Support Use the Support page to connect to the Online Support site at n[...]

  • Seite 242

    242 | Chapter 8: Help GS716Tv2 and GS724Tv3 Software Administration Manual User Guide Use the User Guide page to access the GS716Tv2 and GS724Tv3 Software Administration Manual (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help  User Guide . To access to the User Guide that is avai[...]

  • Seite 243

    Chapter 8: Help | 243 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 244

    Appendix A: Hardware Specifications and Default Values | 244 A. Hardware Specifications and Default Values A GS716T and GS724T Gigabit Smart Switches Specifications The GS716T and GS724T Gigabit Smart Switches conform to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. GS716T Specifications GS724T Specif[...]

  • Seite 245

    Appendix A: Hardware Specifications and Default Values | 245 GS716Tv2 and GS724Tv3 Software Administration Manual GS716T and GS724T Switch Performance GS716T and GS724T Switch Features and Defaults Port Characteristics Feature Value Switching capacity Non-Blocking Full WireSpeed on all packet sizes Forwarding method Store and Forward Packet forward[...]

  • Seite 246

    246 | Appendix A: Hardware Specifications and Default Values GS716Tv2 and GS724Tv3 Software Administration Manual Traffic Control Quality Of Service Security Feature Sets Supported Default Storm control All ports Disabled Jumbo frame All ports Disabled Max = 9216 bytes Feature Sets Supported Default Number of queues 4 N/A Port based N/A N/A 802.1p [...]

  • Seite 247

    Appendix A: Hardware Specifications and Default Values | 247 GS716Tv2 and GS724Tv3 Software Administration Manual System Setup Management Feature Sets Supported Default Boot code update 1 N/A DHCP/manual IP 1 DHCP enabled/192.168.0.239 Default gateway 1 192.168.0.254 System name configuration 1 NULL Configuration save/restore 1 N/A Firmware upgrade[...]

  • Seite 248

    248 | Appendix A: Hardware Specifications and Default Values GS716Tv2 and GS724Tv3 Software Administration Manual Other Features Feature Sets Supported Default IGMP snooping v1/v2 All ports Disabled Configurations upload/download 1 N/A EAPoL flooding All ports Disabled BPDU flooding All ports Disabled Static multicast groups 8 Disabled Filter multi[...]

  • Seite 249

    Appendix B: Configuration Examples | 249 B. Configuration Examples B This chapter contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) on page 250 • Access Control Lists (ACLs) on page 252 • Differentiated Services (DiffServ) on page 255 • 802.1X on page 260 • MSTP on page 263[...]

  • Seite 250

    250 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other witho[...]

  • Seite 251

    Appendix B: Configuration Examples | 251 GS716Tv2 and GS724Tv3 Software Administration Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port mea[...]

  • Seite 252

    252 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Access Control Lists (ACLs) ACLs ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates[...]

  • Seite 253

    Appendix B: Configuration Examples | 253 GS716Tv2 and GS724Tv3 Software Administration Manual • Destination MAC Mask: 00:00:00:00:FF:FF • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 For more information about MAC ACL rules, see MAC Rules on page 186. 3. From the MAC Binding Configuration screen, assign th[...]

  • Seite 254

    254 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual departments. Traffic from the Finance department is identified by each packet’s network IP address. 1. From the IP ACL screen, create a new IP ACL with an IP ACL ID of 1 (See IP ACL on page 190). 2. From the IP Rules screen, create a rule for IP ACL 1 wi[...]

  • Seite 255

    Appendix B: Configuration Examples | 255 GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will. During [...]

  • Seite 256

    256 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.) • Layer 4 source/destination ports • Source/destination IP address From a DiffServ point of view, there are two types of classes: •[...]

  • Seite 257

    Appendix B: Configuration Examples | 257 GS716Tv2 and GS724Tv3 Software Administration Manual • Dropping : drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especially when DiffServ and ACL cannot co-exist on the same interface. • Marking IP DSCP or IP Precedence : marking/re-marking the Diff[...]

  • Seite 258

    258 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: 1. From the QoS Class Configuration screen, create a new class with the following settings: • Class Name: Class1 • Class Type: All[...]

  • Seite 259

    Appendix B: Configuration Examples | 259 GS716Tv2 and GS724Tv3 Software Administration Manual All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3. On this n[...]

  • Seite 260

    260 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual 802.1X Local Area Networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such[...]

  • Seite 261

    Appendix B: Configuration Examples | 261 GS716Tv2 and GS724Tv3 Software Administration Manual A Port Access Entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator : A Port that enforces authentication before allowing access to services available via that Port. 2. Supplicant : A Port that attem[...]

  • Seite 262

    262 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual 3. In the Guest VLAN field for ports e1–e8, enter 150 to assign these ports to the guest VLAN. You can configure additional settings to control access to the network through the ports. See Port Security Interface Configuration on page 179 for information[...]

  • Seite 263

    Appendix B: Configuration Examples | 263 GS716Tv2 and GS724Tv3 Software Administration Manual MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of Spanning Tree to eff[...]

  • Seite 264

    264 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual An MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the same MSTIs, and which have no Bridges attached that cannot receive and transmit MSTP BPDUs. The MST Configuration Identifier has the following compone[...]

  • Seite 265

    Appendix B: Configuration Examples | 265 GS716Tv2 and GS724Tv3 Software Administration Manual Perform the following procedures on each switch to configure MSTP: 1. Use the VLAN Configuration screen to create VLANs 300 and 500 (see VLAN Configuration on page 80). 2. Use the VLAN Membership screen to include ports g1–g8 as tagged (T) or untagged (U[...]

  • Seite 266

    266 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the Forwarding state. 8. Click Apply . You can use the CST Port Status screen to view spanning tree information about each port. 9. From the MST Con[...]

  • Seite 267

    Appendix B: Configuration Examples | 267 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

  • Seite 268

    Appendix C: Notification of Compliance | 268 C. Notification of Compliance NETGEAR Wired Products C Certificate of the Manufacturer/Importer It is hereby certified that the ProSafe™ GS716T and 724T Gigabit Smart Switches has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of [...]

  • Seite 269

    Appendix C: Notification of Compliance | 269 GS716Tv2 and GS724Tv3 Software Administration Manual Europe – EU Declaration of Conformity Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC). This equipment meets the following conformance standards: EN300 328, [...]

  • Seite 270

    270 | Appendix C: Notification of Compliance GS716Tv2 and GS724Tv3 Software Administration Manual FCC Requirements for Operation in the United States FCC Information to User This product does not contain any user serviceable components and is to be used with approved antennas only. Any product changes or modifications will invalidate all applicable[...]

  • Seite 271

    Appendix C: Notification of Compliance | 271 GS716Tv2 and GS724Tv3 Software Administration Manual FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protecti[...]

  • Seite 272

    Index | 272 Index Numerics 802.1X 151 , 168 example configuration 260 A access control ACL example configuration 252 ACLs 183 management interface 161 authentication 802.1X 168 , 260 enable 28 list 159 port-based 168 RADIUS 151 , 153 SNMP 28 , 50 , 51 TACACS+ 156 Auto-Video 109 C certificate 163 changing the password 19 , 150 Configuration 802.1X 1[...]

  • Seite 273

    Index | 273 GS716Tv2 and GS724Tv3 Software Administration Manual E EAP 211 EAPOL 212 F file management 234 firmware 21 firmware download 230 G getting started 10 Green Ethernet 46 , 72 guest VLAN configuration 261 H help, HTML-based 26 HTTP 161 management interface access 18 secure 161 using to download files 232 HTTPS 162 I ICMP 41 IEEE 802.11x 26[...]

  • Seite 274

    274 | Index GS716Tv2 and GS724Tv3 Software Administration Manual R RADIUS 150 server 151 statistics 153 reboot 19 , 226 reset button 151 configuration to defaults 226 switch 226 RSTP 93 S Security MAC Address 181 server, HTTP 161 severity, log message 216 Simple Network Time Protocol 35 SNMP traps 49 using 28 v1, v2 47 v3 51 SNTP 35 Global Status 3[...]

  • Seite 275

    Index | 275 GS716Tv2 and GS724Tv3 Software Administration Manual[...]